1.4 Explain the Assessment of Existing Network Architecture SD-WAN-ENGINEER Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A financial services firm is assessing its network for SD-WAN. The security review reveals that each branch has a firewall that terminates a site-to-site VPN back to the data center. The firewall also performs stateful inspection and NAT. The firm wants to introduce SD-WAN appliances at each branch. What is the most important consideration for the security posture review in this scenario?

   • ADocument the firewall's make and model to ensure it is on the SD-WAN vendor's compatibility list.
   • BFocus only on the VPN configuration and ignore the firewall's other security functions.
   • CDetermine whether the SD-WAN appliance can replace the branch firewall's VPN termination and NAT functions, or if the firewall must remain in the path.
   • DRecommend replacing all branch firewalls with the SD-WAN appliance immediately to simplify the network.
   Reveal Solution Discussion Select an answer first
2. 27foundation · medium

   Which of the following is a key factor to consider in scalability assessment?

   • AProjected number of new sites and users
   • BThe brand of the existing firewalls
   • CThe current weather conditions
   • DThe color of the network cables
   Reveal Solution Discussion Select an answer first
4. 28foundation · medium

   What is the purpose of a scalability and growth projection in an SD-WAN assessment?

   • ATo measure the physical size of the data center
   • BTo determine if the network can handle future growth and new sites
   • CTo calculate the current network's depreciation value
   • DTo identify the number of employees who will retire soon
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A multinational corporation is planning an SD-WAN rollout. The assessment scope has been defined to include all WAN links and branch edge devices, but explicitly excludes the data center security stack. During the security posture review, the team discovers that the data center firewall is performing deep packet inspection (DPI) on all branch-to-data-center traffic. The SD-WAN design team is considering whether to implement DPI at the branch edge. What is the most appropriate action for the assessment team?

   • AExpand the assessment scope to include the data center firewall and perform a full DPI analysis.
   • BRecommend that the SD-WAN design team implement DPI at the branch edge to replace the data center DPI.
   • CDocument the data center DPI as a current security control, but note that it is outside the assessment scope and flag it as a dependency for the SD-WAN design.
   • DIgnore the data center DPI entirely and focus only on the branch edge devices.
   Reveal Solution Discussion Select an answer first
6. 30foundation · medium

   Which of the following is typically included in a current network inventory?

   • AThe names of the network administrators
   • BWAN link types and bandwidth capacities
   • CThe list of software licenses for end-user applications
   • DThe company's business goals for the next five years
   Reveal Solution Discussion Select an answer first